Disk encryption with strong security based on TrueCrypt
This report summarizes scanner evidence for veracrypt/VeraCrypt, a C project with 12,015 GitHub stars. SynthScan examined 406,415 lines of code across 1206 source files, recording 740 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 2.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 658 finding(s).
Are imports declared and package/API names verified? 59 finding(s).
Are wrappers, guards, and repeated structures necessary? 74 finding(s).
Which changes need focused human review? 740 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 740 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tests/test_linux_requester_helper.py | 21 | COMMENT | |
| LOW | Tests/windows_header_cleanup_test.c | 101 | static void TestCryptoClose (PCRYPTO_INFO cryptoInfo) | COMMENT |
| LOW | Tests/linux_process_test.cpp | 1 | // Exercise the production File and Process code using temporary regular files. | COMMENT |
| LOW | Tests/test_fuset_cleanup.py | 21 | #include "Platform/Platform.h" | COMMENT |
| LOW | Tests/volume_read_test.cpp | 1 | // Decrypt the data area of a volume through the volume layer, without | COMMENT |
| LOW | Tests/test_linux_privilege_helpers.py | 41 | #include <cstdlib> | COMMENT |
| LOW | Tests/encryption_thread_pool_exception_test.cpp | 1 | /* Copyright (c) 2026 AM Crypto. Licensed under the Apache License 2.0. */ | COMMENT |
| LOW | Tests/encryption_thread_pool_lifecycle_test.cpp | 1 | /* Copyright (c) 2026 AM Crypto. Licensed under the Apache License 2.0. */ | COMMENT |
| LOW | Tests/windows_kdf_completion_test.c | 21 | #define _beginthreadex TestBeginThread | COMMENT |
| LOW | src/Crypto/Aeskey.c | 241 | COMMENT | |
| LOW | src/Crypto/SerpentFast.c | 1 | /* | COMMENT |
| LOW | src/Crypto/SerpentFast.c | 21 | #define BOTAN_ENDIAN_B2N(x) (x) | COMMENT |
| LOW | src/Crypto/Sha2.c | 1 | /* | COMMENT |
| LOW | src/Crypto/Sha2.c | 21 | COMMENT | |
| LOW | src/Crypto/Sha2.c | 381 | COMMENT | |
| LOW | src/Crypto/Sha2.c | 401 | #define Wt_15(i) Wt((i)-15) | COMMENT |
| LOW | src/Crypto/Sha2.c | 681 | #endif | COMMENT |
| LOW | src/Crypto/Camellia.c | 61 | void camellia_ecb_enc_16way(const uint8 *ctx, uint8 *dst, const uint8 *src); | COMMENT |
| LOW | src/Crypto/chacha-xmm.c | 41 | #pragma warning(default:4799) | COMMENT |
| LOW | src/Crypto/AesSmall.c | 41 | /* define if you have a fast memcpy function on your system */ | COMMENT |
| LOW | src/Crypto/AesSmall.c | 61 | COMMENT | |
| LOW | src/Crypto/sm4-impl-aesni.cpp | 101 | COMMENT | |
| LOW | src/Crypto/Aestab.h | 81 | # endif | COMMENT |
| LOW | src/Crypto/Aestab.h | 101 | # define XP_DIR __cdecl | COMMENT |
| LOW | src/Crypto/Aestab.h | 121 | #endif | COMMENT |
| LOW | src/Crypto/Aestab.h | 141 | d_4(uint_32t, t_dec(i,n), isb_data, v0, v1, v2, v3); | COMMENT |
| LOW | src/Crypto/Aestab.h | 161 | #undef LS4_SET | COMMENT |
| LOW | src/Crypto/Twofish.c | 41 | #include "Common/Endian.h" | COMMENT |
| LOW | src/Crypto/Twofish.c | 761 | f01 = q(0,i); f5b = ffm_5b(f01); fef = ffm_ef(f01); | COMMENT |
| LOW | src/Crypto/Twofish.c | 781 | #define q_1(x) q(0,x) | COMMENT |
| LOW | src/Crypto/Twofish.c | 841 | #endif | COMMENT |
| LOW | src/Crypto/cpu.c | 1 | /* cpu.c - written and placed in the public domain by Wei Dai */ | COMMENT |
| LOW | src/Crypto/cpu.c | 481 | COMMENT | |
| LOW | src/Crypto/Aescrypt.c | 41 | #else | COMMENT |
| LOW | src/Crypto/Aescrypt.c | 81 | #define fwd_rnd(y,x,k,c) (s(y,c) = (k)[c] ^ four_tables(x,t_use(f,n),fwd_var,rf1,c)) | COMMENT |
| LOW | src/Crypto/Aescrypt.c | 201 | #if defined(IT4_SET) | COMMENT |
| LOW | src/Crypto/config.h | 1 | #ifndef CRYPTOPP_CONFIG_H | COMMENT |
| LOW | src/Crypto/config.h | 21 | COMMENT | |
| LOW | src/Crypto/config.h | 41 | #endif | COMMENT |
| LOW | src/Crypto/config.h | 61 | #elif defined(__GNUC__) | COMMENT |
| LOW | src/Crypto/config.h | 81 | #else | COMMENT |
| LOW | src/Crypto/config.h | 101 | #else | COMMENT |
| LOW | src/Crypto/config.h | 121 | #endif | COMMENT |
| LOW | src/Crypto/config.h | 141 | #define CRYPTOPP_BOOL_SSSE3_INTRINSICS_AVAILABLE 0 | COMMENT |
| LOW | src/Crypto/config.h | 161 | COMMENT | |
| LOW | src/Crypto/config.h | 181 | // Detect via __ILP32__ (http://wiki.debian.org/X32Port). However, __ILP32__ shows up in more places than | COMMENT |
| LOW | src/Crypto/config.h | 201 | COMMENT | |
| LOW | src/Crypto/config.h | 221 | // VC_UNALIGNED_ACCESS_OK is 1 on targets where unaligned 32- and 64-bit loads | COMMENT |
| LOW | src/Crypto/config.h | 241 | # define CRYPTOPP_ARM_ASIMD_AVAILABLE 1 | COMMENT |
| LOW | src/Crypto/config.h | 261 | # if defined(__aarch32__) || defined(__aarch64__) || defined(_M_ARM64) | COMMENT |
| LOW | src/Crypto/config.h | 281 | // the LDRD/STRD/LDM instructions used for 64-bit words still fault (SIGBUS). | COMMENT |
| LOW | src/Crypto/misc.h | 1 | #ifndef CRYPTOPP_MISC_H | COMMENT |
| LOW | src/Crypto/misc.h | 21 | #if !defined(TC_WINDOWS_DRIVER) && !defined(_UEFI) | COMMENT |
| LOW | src/Crypto/misc.h | 41 | #define CRYPTOPP_FAST_ROTATE(x) ((x) == 32) | COMMENT |
| LOW | src/Crypto/misc.h | 61 | #else | COMMENT |
| LOW | src/Crypto/misc.h | 81 | #define rotr8(x,n) (((x) >> n) | ((x) << (8 - n))) | COMMENT |
| LOW | src/Crypto/misc.h | 101 | #define bswap_64 OSSwapInt64 | COMMENT |
| LOW | src/Crypto/misc.h | 241 | #define GetAlignmentOf(T) sizeof(T) | COMMENT |
| LOW | src/Crypto/Aesopt.h | 101 | #endif | COMMENT |
| LOW | src/Crypto/Aesopt.h | 201 | order (which later checks below ensure). | COMMENT |
| 506 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Tests/test_macos_discovery.py | 124 | for(auto volume:volumes)Require(volume->Discovery==VolumeInfo::DiscoveryUnknown && volume->VirtualDevice.empty() | CODE |
| HIGH | Tests/test_macos_discovery.py | 128 | Require(Queries==4 && volumes.front()->VirtualDevice=="/dev/disk42", "destructive lookup reused display snapshot | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 59 | struct stat st, null; | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 60 | return fstat (fd, &st) == 0 && stat ("/dev/null", &null) == 0 && S_ISCHR (st.st_mode) && st.st_rdev == null.st_rdev; | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 60 | return fstat (fd, &st) == 0 && stat ("/dev/null", &null) == 0 && S_ISCHR (st.st_mode) && st.st_rdev == null.st_rdev; | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 68 | if (geteuid() != 0 && (!FreshHelper || ParentOnlyMarker != 0 | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 71 | || fcntl (InheritedFd, F_GETFD) != -1 || errno != EBADF)) | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 104 | if (setgroups (1, &groupId) != 0 || setgid (groupId) != 0 || setuid (userId) != 0 | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 107 | || listen (listening, 1) != 0 || write (ready[1], "r", 1) != 1) | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 111 | _exit (connection != -1 && recv (connection, &data, sizeof (data), 0) == 0 ? 0 : 1); | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 189 | && reply.Stage == RequesterHelperSucceeded && unused == -1, "fresh timestamp helper"); | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 191 | Require (stat (argv[3], &st) == 0 && st.st_atime == timesRequest.Times[0].tv_sec | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 199 | && reply.Stage == RequesterHelperStartup && unused == -1, | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 201 | Require (stat (argv[3], &st) == 0 && st.st_atime == 1500000000 && st.st_mtime == 1500000100, | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 205 | && reply.Stage == RequesterHelperStartup && unused == -1, | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 209 | && reply.Stage == RequesterHelperStartup && unused == -1, "exec errno lost"); | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 244 | Require (RunRequesterHelperProcess (request, reply, unused) != 0 && unused == -1, | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 246 | Require (fstat (descriptor, &st) == 0 && st.st_size != 0, "invalid request truncated file"); | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 250 | Require (RunRequesterHelperProcess (noPath, reply, unused) != 0 && unused == -1, | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 253 | Require (RunRequesterHelperProcess (request, reply, unused) != 0 && unused == -1, | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 257 | Require (RunRequesterHelperProcess (request, reply, unused) != 0 && unused == -1, | CODE |
| HIGH⚡ | Tests/test_linux_requester_helper.py | 267 | Require (waitpid (-1, nullptr, WNOHANG) == -1 && errno == ECHILD, "unreaped helper"); | CODE |
| HIGH | Tests/test_linux_requester_helper.py | 127 | Require (service != -1 && waitpid (service, &serviceStatus, 0) == service, "run helper service"); | CODE |
| HIGH | Tests/test_linux_requester_helper.py | 142 | if (argc == 3 && strcmp (argv[1], TC_REQUESTER_HELPER_CMDLINE_OPTION) == 0) | CODE |
| HIGH | Tests/test_linux_requester_helper.py | 149 | Require (argc == 4 && geteuid() == 0, "expected root: UID GID FILE"); | CODE |
| HIGH | Tests/test_linux_requester_helper.py | 175 | && reply.Stage == RequesterHelperSucceeded && descriptor != -1, "fresh open helper"); | CODE |
| HIGH | Tests/test_linux_requester_helper.py | 229 | && reply.Stage == RequesterHelperStartup && unused == -1, "early exit was not a startup failure"); | CODE |
| HIGH⚡ | Tests/test_fuset_cleanup.py | 87 | Require(worker.StartupAborted && Mounted && Finished==0,"busy rollback stopped FUSE"); | CODE |
| HIGH⚡ | Tests/test_fuset_cleanup.py | 88 | Require(Replies==1 && Reply==(command==VC_FUSE_SHUTDOWN_PROBE?0:EBUSY),"busy rollback starved endpoint"); | CODE |
| HIGH⚡ | Tests/test_fuset_cleanup.py | 92 | Require(worker.Unmounted && !Mounted && Finished==1,"rollback did not resume after busy cleared"); | CODE |
| HIGH | Tests/test_fuset_cleanup.py | 249 | if(!Mounted || FailPreflight)throw MountServiceUnavailable("mock preflight"); | STRING |
| HIGH | Tests/test_fuset_cleanup.py | 262 | ++Waits; if(pid!=1234 || startTime!=987654321)throw std::runtime_error("wrong service identity"); | STRING |
| HIGH | Tests/test_fuset_cleanup.py | 288 | Require(Discoveries==0 && Requests==0, "operation after failed preflight"); | STRING |
| HIGH | Tests/test_fuset_cleanup.py | 298 | Require(!Mounted && Requests==1 && Waits==1, "service exit was not awaited after SMB removal"); | STRING |
| HIGH | Tests/test_fuset_cleanup.py | 310 | Require(CapturedReads==1 && !Mounted && Commands==0, "hidden-protection refresh did not use captured volume"); | STRING |
| HIGH | Tests/test_backup_header_retry.py | 101 | bool cached = State.Cache && (!options.Password || options.Password->IsEmpty()) | CODE |
| HIGH | Tests/test_backup_header_retry.py | 102 | && (!options.Keyfiles || options.Keyfiles->empty()); | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 183 | Require (failure == BackendFailure && string (e.what()) == "backup" | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 184 | && e.GetCommand() == "mount" && e.GetExitCode() == 37 && e.GetErrorOutput() == "backend details", | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 187 | Require (failure == IoFailure && e.GetErrorCode() == EIO && string (e.what()) == "backup", | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 190 | Require (failure == Cancelled && string (e.what()) == "backup" && e.GetSubject() == L"cancelled mount", | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 193 | Require (failure == StandardFailure && string (e.what()) == "backup", "standard exception changed"); | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 195 | Require (failure == UnknownFailure && e.Code == 42, "unknown exception changed"); | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 211 | Require (options.Password == State.Calls.back().Password && options.Pim == State.Calls.back().Pim, | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 214 | Require (State.OuterPrompts == 3 && State.BackupWarnings.empty(), "failure prompted again or warned of success") | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 221 | Require (!options.UseBackupHeaders && State.BackupWarnings.empty(), "failed fallback reported as successful"); | CODE |
| HIGH⚡ | Tests/test_backup_header_retry.py | 222 | Require (State.OuterPrompts == 4 && State.Messages == vector<string> ({"primary", "primary", "primary"}), | CODE |
| HIGH | Tests/test_backup_header_retry.py | 237 | && State.Calls[3].Pim == State.Calls[4].Pim && State.Calls[3].Keyfiles == State.Calls[4].Keyfiles, | CODE |
| HIGH | Tests/test_backup_header_retry.py | 241 | Require (State.OuterPrompts == 3 && options.UseBackupHeaders, "accepted backup selection lost"); | CODE |
| HIGH | Tests/test_backup_header_retry.py | 252 | Require (options.UseBackupHeaders && State.BackupWarnings.empty(), "explicit backup option changed"); | CODE |
| HIGH | Tests/test_backup_header_retry.py | 265 | Require (State.OuterPrompts == 0 && State.BackupWarnings.empty(), "cache recovery asked for outer password"); | CODE |
| HIGH | Tests/test_fuset_aux_directory.py | 67 | if(result==0 && IgnoreOwnership)info->f_flags |= MNT_IGNORE_OWNERSHIP; | CODE |
| HIGH | Tests/test_fuset_aux_directory.py | 96 | if(rename(path.c_str(), (path+".original").c_str())!=0 || mkdir(path.c_str(), 0700)!=0) | CODE |
| HIGH | Tests/test_linux_privilege_helpers.py | 155 | Require(option == 39 && a == 0 && b == 0 && c == 0 && d == 0, | CODE |
| HIGH | Tests/test_linux_privilege_helpers.py | 176 | Require(errno == ENOENT && error.find("not found in system directories") != std::string::npos, | CODE |
| HIGH⚡ | Tests/test_linux_privilege_helpers.py | 213 | if (argc == 3 && std::string(argv[1]) == "--resolve") { | CODE |
| HIGH⚡ | Tests/test_linux_privilege_helpers.py | 219 | if (argc == 3 && std::string(argv[1]) == "--trusted") { | CODE |
| HIGH⚡ | Tests/test_linux_privilege_helpers.py | 228 | if (argc == 2 && std::string(argv[1]) == "--kernel") { | CODE |
| HIGH | Tests/test_linux_service_inheritance.py | 43 | while (waitpid(child, &status, 0) == -1 && errno == EINTR) { } | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Tests/test_macos_gui_lifecycle.py | 85 | except ProcessLookupError: | CODE |
| HIGH | Tests/test_linux_loop_identity.py | 101 | except OSError: | CODE |
| HIGH | Tests/test_stdin_password.py | 73 | except ProcessLookupError: | CODE |
| HIGH | Tests/test_fuset_aux_directory.py | 238 | except PermissionError: | CODE |
| HIGH | Tests/test_fuset_aux_directory.py | 243 | except PermissionError: | CODE |
| HIGH | Tests/test_fuset_aux_directory.py | 248 | except PermissionError: | CODE |
| HIGH | Tests/test_fuset_dismount.py | 176 | except ProcessLookupError: | CODE |
| HIGH | Tests/test_linux_process.py | 53 | except ProcessLookupError: | CODE |
| HIGH | Tests/test_linux_requester_access.py | 199 | except PermissionError: | CODE |
| HIGH | Tests/test_linux_requester_access.py | 367 | except OSError: | CODE |
| HIGH | Tests/test_linux_requester_access.py | 168 | except (OSError, IndexError): | CODE |
| HIGH | Tests/test_linux_requester_access.py | 274 | except OSError: | CODE |
| HIGH | Tests/test_linux_requester_access.py | 400 | except (OSError, KeyError): | CODE |
| HIGH | Tests/test_linux_requester_access.py | 272 | except OSError: | CODE |
| HIGH | src/Build/test_veracrypt_openwrt_qemu.py | 298 | except tarfile.TarError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tests/test_xmlvalidate.py | 60 | def test_complete_translations_and_english_fallbacks_pass(self): | CODE |
| LOW | Tests/test_xmlvalidate.py | 71 | def test_reports_every_missing_key_and_continues_to_later_files(self): | CODE |
| LOW | Tests/test_xmlvalidate.py | 87 | def test_malformed_xml_reports_parser_error_and_continues(self): | CODE |
| LOW | Tests/test_xmlvalidate.py | 103 | def test_invalid_escape_reports_error_and_continues(self): | CODE |
| LOW | Tests/test_stdin_password.py | 55 | def check_overflow_without_eof(vc, checks, work, env): | CODE |
| LOW | Tests/test_linux_read_only_integration.py | 168 | def check_read_only_block_device(checks, path, layers): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 22 | def test_windows_narrow_and_wide_strings_are_distinct(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 27 | def test_portable_printf_rejects_windows_only_modifiers(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 35 | def test_printf_percent_escapes_and_numeric_fields(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 42 | def test_windows_integer_widths_and_signedness(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 47 | def test_invalid_and_writing_printf_conversions_are_rejected(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 52 | def test_formatter_allows_reordering_repetition_and_escaped_braces(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 57 | def test_formatter_does_not_accept_windows_modifiers(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 60 | def test_formatter_rejects_malformed_and_out_of_grammar_fields(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 112 | def test_english_fallback_and_localized_percent_position_pass(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 118 | def test_korean_rescue_disk_invalid_conversion_is_rejected(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 121 | def test_korean_target_identity_cannot_be_omitted(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 124 | def test_hebrew_drive_annotation_cannot_be_omitted(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 128 | def test_extra_overwrite_argument_and_integer_keyfile_are_rejected(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 132 | def test_incorrect_windows_string_width_is_rejected(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 136 | def test_wx_messages_reject_windows_only_string_modifiers(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 142 | def test_windows_modifiers_and_portable_wx_modifiers_pass(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 150 | def test_numeric_xml_entities_cannot_supply_placeholders(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 246 | def test_escaped_numeric_entity_text_does_not_supply_placeholders(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 253 | def test_both_basque_percent_escape_errors_are_rejected(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 257 | def test_unreferenced_and_out_of_range_formatter_arguments_are_rejected(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 262 | def test_messages_shown_without_formatting_cannot_gain_placeholders(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 266 | def test_recorded_omissions_allow_only_the_recorded_argument_prefix(self): | CODE |
| LOW⚡ | Tests/test_translation_formats.py | 274 | def test_missing_key_and_malformed_xml_fail(self): | CODE |
| LOW | Tests/test_translation_formats.py | 166 | def test_numeric_xml_entities_in_reference_are_rejected(self): | CODE |
| LOW | Tests/test_translation_formats.py | 177 | def test_custom_xml_entities_cannot_supply_placeholders(self): | CODE |
| LOW | Tests/test_translation_formats.py | 197 | def test_quote_entities_are_rejected_in_unformatted_entries(self): | CODE |
| LOW | Tests/test_translation_formats.py | 208 | def test_repeated_entity_escaping_is_rejected(self): | CODE |
| LOW | Tests/test_translation_formats.py | 219 | def test_quote_entities_in_reference_are_rejected(self): | CODE |
| LOW | Tests/test_translation_formats.py | 230 | def test_entity_check_only_inspects_entry_text(self): | CODE |
| LOW⚡ | Tests/test_wxbuild_jobs.py | 161 | def test_recursive_build_shares_parent_slots(self): | STRING |
| LOW⚡ | Tests/test_wxbuild_jobs.py | 164 | def test_openwrt_build_shares_parent_slots(self): | STRING |
| LOW⚡ | Tests/test_wxbuild_jobs.py | 167 | def test_openwrt_empty_pkg_jobs_stays_serial(self): | STRING |
| LOW | src/SetupDLL/Setup.c | 1827 | * Same as Setup.c, function DoApplicationDataUninstall(), but | COMMENT |
| LOW | src/Build/test_veracrypt_openwrt_qemu.py | 275 | def extract_top_level_control_archive(ipk_path): | CODE |
| LOW⚡ | src/Build/test_veracrypt_openwrt_qemu.py | 441 | def official_index_cache_path(work_dir, info, name): | CODE |
| LOW⚡ | src/Build/test_veracrypt_openwrt_qemu.py | 446 | def kmod_dir_from_kernel_version(version): | CODE |
| LOW⚡ | src/Build/test_veracrypt_openwrt_qemu.py | 454 | def official_manifest_kernel_version(args, info): | CODE |
| LOW | src/Build/test_veracrypt_openwrt_qemu.py | 466 | def discover_single_kmod_feed_url(info): | CODE |
| LOW | src/Build/test_veracrypt_openwrt_qemu.py | 482 | def resolve_official_kmod_feed_url(args, info): | CODE |
| LOW | src/Build/test_veracrypt_openwrt_qemu.py | 495 | def official_kmod_package_index(args): | CODE |
| LOW | src/Main/UserInterface.cpp | 40 | class AdminPasswordRequestHandler : public GetStringFunctor | CODE |
| LOW | src/Main/TextUserInterface.cpp | 66 | class AdminPasswordTextRequestHandler : public GetStringFunctor | CODE |
| LOW | src/Main/TextUserInterface.h | 22 | class AdminPasswordTextRequestHandler; | CODE |
| LOW | src/Main/TextUserInterface.h | 26 | friend class AdminPasswordTextRequestHandler; | CODE |
| LOW | src/Main/GraphicUserInterface.cpp | 121 | class AdminPasswordGUIRequestHandler : public GetStringFunctor | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/xmlvalidate.sh | 44 | # Check if the common Language.xml exists | COMMENT |
| LOW | .github/workflows/xmlvalidate.sh | 178 | # Output the result for the current file | COMMENT |
| LOW | src/Setup/MacOSX/notarize.sh | 48 | # Check if VeraCrypt.app bundle exists | COMMENT |
| LOW⚡ | src/Build/sign_rpm.sh | 9 | # Check if a directory was provided as an argument | COMMENT |
| LOW⚡ | src/Build/sign_rpm.sh | 16 | # Check if the specified directory exists | COMMENT |
| LOW⚡ | src/Build/sign_rpm.sh | 22 | # Check if there are any RPM files in the directory | COMMENT |
| LOW | src/Build/build_cmake_deb.sh | 130 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_cmake_opensuse.sh | 100 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_cmake_opensuse.sh | 123 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_veracrypt_freebsd.sh | 46 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_veracrypt_freebsd.sh | 63 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_cmake_rpm.sh | 100 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_cmake_rpm.sh | 125 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_veracrypt_macosx.sh | 153 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_veracrypt_linux.sh | 51 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_veracrypt_linux.sh | 68 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_veracrypt_linux_no_sse2.sh | 51 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| LOW | src/Build/build_veracrypt_linux_no_sse2.sh | 67 | # Check if wx-config exists in WX_BUILD_DIR | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tests/test_macos_gui_inactivity.py | 19 | CODE | |
| LOW | Tests/test_stdin_password.py | 55 | CODE | |
| LOW | Tests/test_linux_read_only_integration.py | 227 | CODE | |
| LOW | Tests/test_fuset_aux_directory.py | 26 | CODE | |
| LOW | Tests/test_fuset_dismount.py | 212 | CODE | |
| LOW | Tests/test_fuset_dismount.py | 285 | CODE | |
| LOW | Tests/test_fuset_dismount.py | 324 | CODE | |
| LOW | Tests/test_linux_process.py | 21 | CODE | |
| LOW | Tests/test_linux_requester_access.py | 263 | CODE | |
| LOW | Tests/test_linux_requester_access.py | 387 | CODE | |
| LOW | .github/workflows/validate_translation_formats.py | 130 | CODE | |
| LOW | .github/workflows/validate_translation_formats.py | 175 | CODE | |
| LOW | .github/workflows/validate_translation_formats.py | 267 | CODE | |
| LOW | src/Build/test_veracrypt_openwrt_qemu.py | 275 | CODE | |
| LOW | src/Build/test_veracrypt_openwrt_qemu.py | 318 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Tests/test_linux_loop_identity.py | 363 | # Creating the device-mapper device fails if one of the same name exists, here without a UUID, as created | COMMENT |
| MEDIUM | .github/workflows/xmlvalidate.sh | 41 | # Define the path to the common Language.xml | COMMENT |
| MEDIUM | .github/workflows/xmlvalidate.sh | 75 | # Define the regex for finding invalid escape sequences. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/Build/veracrypt-launchpad-uploader.py | 1 | # ============================================================================= | COMMENT |
| MEDIUM | src/Build/veracrypt-launchpad-uploader.py | 3 | # ============================================================================= | COMMENT |
| MEDIUM | src/Build/veracrypt-launchpad-uploader.py | 28 | # ============================================================================= | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tests/test_linux_loop_identity.py | 538 | except Exception as e: | CODE |
| LOW | Tests/test_linux_fuse_fsync.py | 279 | except Exception as e: | CODE |
| LOW | Tests/test_linux_requester_access.py | 207 | except Exception as e: | CODE |
| MEDIUM | src/Build/test_veracrypt_openwrt_qemu.py | 871 | print(f"Error: {exc}", file=sys.stderr) | CODE |
| LOW | src/Build/veracrypt-launchpad-uploader.py | 154 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/Crypto/Argon2/src/opt_sse2.c | 133 | /* Don't forget to generate the first block of addresses: */ | COMMENT |
| LOW | src/Crypto/Argon2/src/ref.c | 128 | /* Don't forget to generate the first block of addresses: */ | COMMENT |
| LOW | src/Crypto/Argon2/src/opt_avx2.c | 133 | /* Don't forget to generate the first block of addresses: */ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tests/test_mount_helper.py | 100 | def helper(options=None, extra=()): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | doc/html/en/Random Number Generator.html | 49 | <p>The purpose of this function is to perform diffusion [2]. Diffusion spreads the influence of individual “raw&rd | CODE |